{# Audit "Profile" — the audit's only "user" is the gcloud principal
   ADC is bound to. Mirrors governor_web/templates/settings/profile.html
   (Display Name + Email + Roles), substituted for the audit-relevant
   fields. #}
{% extends "settings/layout.html" %}

{% block settings_content %}
<div class="space-y-6">

  <div class="ui-pane">
    <h2 class="ui-section-title">gcloud Account</h2>
    <p class="ui-section-subtitle">The Google account ADC is currently bound to.</p>
    <div class="mt-4">
      {% if principal %}
        <p class="text-sm text-slate-900 dark:text-slate-100 font-mono break-all">{{ principal }}</p>
      {% else %}
        <p class="text-sm text-amber-600 dark:text-amber-300">
          No active gcloud principal detected. Run
          <code class="font-mono bg-slate-100 dark:bg-slate-800 px-1.5 py-0.5 rounded">gcloud auth application-default login</code>
          and reload this page.
        </p>
      {% endif %}
    </div>
  </div>

  <div class="ui-pane">
    <h2 class="ui-section-title">ADC Probe</h2>
    <p class="ui-section-subtitle">Last credential check against your audit target.</p>
    <div class="mt-4 flex flex-wrap items-center gap-3">
      <span class="ui-pill {% if adc.ok %}ui-pill-success{% else %}ui-pill-danger{% endif %}">
        {{ "ok" if adc.ok else (adc.status | replace("_", " ") | lower) }}
      </span>
      {% if adc.message %}
        <p class="text-sm text-slate-600 dark:text-slate-300">{{ adc.message }}</p>
      {% endif %}
    </div>
  </div>

  <div class="ui-pane">
    <h2 class="ui-section-title">Audit Target</h2>
    <p class="ui-section-subtitle">Project + region this binary will scan. Edit on <a href="/admin/configurations" class="text-brand-500 dark:text-brand-300 hover:underline">/admin/configurations</a>.</p>
    <dl class="mt-4 grid grid-cols-[max-content_1fr] gap-x-4 gap-y-2 text-sm">
      <dt class="text-slate-500 dark:text-slate-400">GCP project</dt>
      <dd class="font-mono text-slate-900 dark:text-slate-100">{{ config.gcp_project_id }}</dd>
      <dt class="text-slate-500 dark:text-slate-400">BigQuery region</dt>
      <dd class="font-mono text-slate-900 dark:text-slate-100">{{ config.bigquery_region }}</dd>
      <dt class="text-slate-500 dark:text-slate-400">Audit binary</dt>
      <dd class="font-mono text-slate-900 dark:text-slate-100">v{{ app_version }}</dd>
      <dt class="text-slate-500 dark:text-slate-400">Config file</dt>
      <dd class="font-mono text-slate-900 dark:text-slate-100">~/.governor-audit/config.json</dd>
      <dt class="text-slate-500 dark:text-slate-400">Cache DB</dt>
      <dd class="font-mono text-slate-900 dark:text-slate-100">~/.governor-audit/state.db</dd>
    </dl>
  </div>
</div>
{% endblock %}